Release notes

• Our custom high-resolution asset importer can now deal with additional codecs and audio-line-ups, and create screening-quality previews.
• We have started the implementation work on various larger projects, to be fully announced and launched over the coming months.
• Various client-specific requests were completed.

• We are thrilled to announce the launch of two new client platforms:
  • ITV Studios launches a fully bespoke sales and distribution platform to present its current highlights, library content, virtual and physical events, and much more: https://itvstudios.com/
  • California Pictures utilizes a customized version of our white-label client site as its new corporate and sales platform to let its boutique content shine: https://calpictures.com/
• Under the hood, various optimizations to database operations and external watchfolder-based content sync integrations were implemented.
• Various smaller client-specific changes were completed.

• A password policy change went live for our client Entertainment One, tightening its password policy and requiring all existing users to set a new password.
• We are in the process of implementing a platform for our new client California Pictures, based on our white-label client site, and have deployed some preliminary elements. Work will continue over the next few weeks.
• Various smaller client-specific changes were implemented.
• Our new administrative site is progressing further, now including revamped sections for website CMS and marketing tools, and will soon be available on request.

• Multiple enhancements to our screening conferences, such as the ability to play back additional videos ad-hoc that were not added to the playlist in advance, are now available to integrate into any existing conferencing implementation.
• Some minor client-specific changes were implemented.
• More groundwork has been laid for our new administrative interface and adherent functionality, such as configurable event/microsite pages.

• Various backend enhancements were deployed:
  • Improved handling of analytics data
  • Improved flexibility of product metadata definitions and search
• Our new administrative interface, including handling of flexible event pages or microsites, is proceeding further and available to preview.
• Various client-specific additions and fixes were completed.

• A new, custom-designed catalog microsite was launched for our client eOne, featuring PDF downloads protected by MediaStore’s access logic.
• Performance of product-related metadata retrieval was improved across the platform, resulting in faster page loading.
• Multiple client-specific changes were deployed.
• Many backend changes and improvements were completed in order to ready the MediaStore system for our upcoming new administrative interface, to be released as a presentable MVP within Q1/2022.

• A custom ‘personal client dashboard‘ section for one of our clients has almost been finished, unifying client-specific data such as favorite titles, received recommendations, and targeted themed collections.
• Our screening conferences tool has been updated to the latest version, ensuring ongoing compatibility with future versions of all major browsers.
• Various smaller client-specific changes were implemented.

In December 2021, a vulnerability in log4j, a commonly used logging tool, was reported and widely publicised due to its potential for exploitation of technical infrastructure components all around the globe. For more information, please refer to:
https://www.cisa.gov/news/2021/12/11/statement-cisa-director-easterly-log4j-vulnerability
https://logging.apache.org/log4j/2.x/security.html

Once this vulnerability became known around December 10th, mediafellows started assessing its impact on the MediaStore system in order to provide swift remediation where needed.

All in all, no critical system components were found to be affected, as log4j is not widely deployed within MediaStore’s infrastructure. However, two services are running log4j and thus required attention:

• Elastic Search
  • Purpose: Provide indices of searchable metadata (e.g. users, products, assets) in order to provide searching and filtering functionality in the administrative and client-facing MediaStore sites.
  • log4j vulnerability impact: None. Our version of Elastic Search uses log4j 1.x, however only log4j 2.x is affected. (Any future upgrade of Elastic Search will include a patched log4j version.)
• Logstash
  • Purpose: Provide automated logging of system activities, including basic non-critical metadata on system processes and involved objects. (Does not provide access to full metadata records or any stored files/assets.)
  • log4j vulnerability impact: Used an affected log4j version. An upgrade to Logstash version 7.16.1, using patched log4j 2.15.0, was performed on December 13th.

It’s worth noting that both services are not public-facing parts of MediaStore’s infrastructure and are thus far less prone to direct user input, nonetheless we patched Logstash as soon as possible in order to avoid any potential risk.

• Groundwork has been laid for integration of live video streams into pages such as event- or title-specific microsites. As a next step, further development will be undertaken to enable easy management of such streams using MediaStore’s administrative site. For the time being, this functionality will be available on request only.
• A recent update of our mobile app for iOS devices introduces some tweaks and fixes, such as more flexible second-screen sharing and immediate in-Collection navigation between included products.
• Various minor client-specific improvements were deployed.

• Our professional screening and QC video player receives another update, available on request: Optionally, predefined audio track label definitions can be managed in the MediaStore system’s settings, which will be provided as suggestions. This avoids uncontrolled manual entry of deviating labels.
• Our screening-quality video transcoding and delivery workflow, also available on request, has been expanded with additional watermarking features. It is now possible to apply up to three watermarks in parallel – free text, recipient email, and burn-in timecode.
• Some tweaks to our API interconnection with Microsoft Dynamics, the CRM solution favored by one of our clients, ensures smoother and more timely relay of screening links.
• Our new client Relativity Media, opting for a white-label client site focussing on sales and marketing, is close to official launch, with data imports and customizations all but completed.